SafeEnterprise Ethernet Encryptor

The cost of network communications bandwidth has decreased significantly in recent years, and next generation WAN services like VPLS, VDSL, and Metro Ethernet are helping to drive down costs further. Enterprises are now able to link corporate and regional offices, server farms, data centers and disaster recovery centers, across floors or across continents, with multi-megabit or even gigabit lines at a fraction of the cost they were paying before.

With more and more enterprises relying on high-speed communications to connect critical network infrastructures in support of business operations and continuity, a single disruption or malicious attack against an Ethernet network can cause businesses to lose not only credibility but also millions of dollars due to theft of intellectual property. Furthermore, data breeches can create significant legal liability.

Especially with critical data, traversing multiple carriers and multiple network nodes before arriving at its final destination, organizations must ensure that sensitive information is protected from compromise by using the strongest encryption schemes available, without compromising network performance. Metro Ethernet and other next-generation services have emerged as the transport technology of choice because they are designed to provide greater bandwidth efficiency, and ease of installation and use for end users and network operators. Safenet encryptors operate transparently, and unlike Layer 3 encryption solutions, they have minimal impact on the network.

SafeNet SafeEnterprise™ Ethernet Encryptors are a family of high-performance Layer 2 security appliances that protect 10Mbps, 100Mbps and GbE Ethernet networks. With seamless end-to-end integration on Metro Ethernets, SafeEnterprise Ethernet Encryptors deliver instant protection across the network at Layer 2, adding far less latency to mission-critical applications than Layer 3 solutions like IPSec VPNs.

Like all SafeNet high-speed security appliances, the SafeEnterprise Ethernet Encryptor is managed by the SafeEnterprise Security Management Center (SMC), a robust, Java™-based policy management application with secure, flexible, and transparent SNMP-based control and monitoring capabilities. SMC provides the ability to define integrated security policies that can be centrally and remotely distributed across multiple devices, reducing management complexity and cost.

Performance

• Full-duplex operation at line speed with no packet loss for all modes of operation
• Cut-through data streaming for low latency vs. store and forward architectures
• Key change without interruption

Network

• Ethernet II, IEEE 802.3
• Jumbo frame support
• VLAN, MPLS transparency

Interfaces

• SFP fiber modules (Multi-mode: 850nm, Single-mode: 1310nm)
• SFP electrical modules

Cryptography

• AES algorithm - 256-bit key
• CFB providing automatic crypto resynchronization

Key Features

• Full-duplex line rate AES encryption for 10Mbps, FastEthernet (100Mbps), and Gigabit Ethernet (GbE) networks
• Standards-based authentication, digital certificates, and key management
• Bump-in-the-wire design for easy installation into existing network environments
• Designed to international Common Criteria and U.S. Government FIPS security standards
• Part of world's first complete family of High-Speed Encryption devices for network security interface independence
• Central remote configuration, monitoring, and management through SafeEnterprise Security Management Center